f60b7d4c21e5db2fc0601402bb79eb315db4a2638afb5f9252df03d2f7260ad4 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-03-2024 13:28

Sharing

Report Analysis Logs

General

Target

e1c704cecf5143e8e9439fa1b64829f6.pdf
Size

33KB
MD5

e1c704cecf5143e8e9439fa1b64829f6
SHA1

e4e77ff38a5428a7c2b0933edb7cb4be6b4c4f1d
SHA256

f60b7d4c21e5db2fc0601402bb79eb315db4a2638afb5f9252df03d2f7260ad4
SHA512

515c3e01333d9b9d3f89e3e38a8ac7a9601fbecb46f3da203c83eb10f047ddc35bbdbb942166e522afbbad5da086e753274b6d844c08976a871c7f43076315a6
SSDEEP

768:xY7JfqJhBKu1N28kYbSKfPLurHQ51tOaJ+C8CO:Cui8FbSKLuG7Oc9O

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2164	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2164	AcroRd32.exe
2164	AcroRd32.exe
2164	AcroRd32.exe
2164	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e1c704cecf5143e8e9439fa1b64829f6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
195704a74785a69cc6d7077297fa6e78

SHA1
d365cd1827ad0101722e2fd8f5eab44e2abe7f37

SHA256
5b78737d2f2edecbd9efd4c7791d20ea16cd71318cea71a4632e31bf26b24d62

SHA512
6c9ab9d6e43bb08c82b019824254b1da4714fa34bc14e15e065235c91651e41d53f312228f60107d8a72a0d824bbd537dd24e77effc2693f823210618b398685

Download Submit